Question 1

Which option correctly describes the authentication differences between CyberArk Privilege Cloud andCyberArk PAM Self-Hosted?

Options :

A : CyberArk Privilege Cloud only provides a username and password authentication without third-partyIdP integration; CyberArk PAM Self-Hosted uses traditional on-premises methods such as Windowsand LDAP. but lacks modern protocols such as SAML or OIDC.

B : CyberArk Privilege Cloud uses cloud-based methods, integrating with CyberArk Identity for MFA. andsupports SAML and OIDC; CyberArk PAM Self-Hosted depends on on-premises methods such asRADIUS and LDAP, but can adopt SAML or OIDC with additional setups.

C : CyberArk Privilege Cloud requires on-premises components for all authentication and does not supportother cloud-based authentication protocols; CyberArk PAM Self-Hosted offers a wide array ofmethods, including support for SAML. OIDC. and other modern protocols, without needing onpremises components.

D : Both use the same authentication methods.

Answer: B

Question 2

You plan to install the Privilege Cloud Connector on Windows Server 2019 and must leverage your existingRDS Per-user licenses for PSM connections. What must you do?

Options :

A : Add the UseRDSPerUser=Yes line to the basic_psm.ini parameters file.

B : Install the RDS License Server Service on Windows 2016.

C : Migrate the local PSMConnect users to Domain users.

D : Modify the UseRDSPerUser parameter to Yes on every Windows-related platform.

Answer: C

Question 3

What must be specified when authenticating to Privilege Cloud during the Secure Tunnel install?

Options :

A : Vault IP Address

B : Subdomain or Customer ID

C : Privilege Cloud URL

D : CaseID

Answer: B

Question 4

What must be done before configuring directory mappings in the CyberArk Privilege Cloud Standard Portalfor LDAP integration?

Options :

A : Retrieve the LDAPS certificate and deliver it to CyberArk.

B : Create a new domain in the Privilege Cloud Portal.

C : Make sure HTTPS (443/tcp) is reachable over the Secure Tunnel.

D : Ensure the user connecting to the domain has administrative privileges.

Answer: A

Question 5

Which statements accurately describe the process of LDAP integration with CyberArk Privilege CloudStandard? (Choose two.)

Options :

A : Directory maps determine user or group creation within the Privilege Cloud Vault.

B : A tailored Python script is required to facilitate the LDAP server interaction.

C : Upon user login, their directory attributes are refreshed through the directory map.

D : For establishing a connection, the domain base context is not a prerequisite.

Answer: A,C